Refreshing "forgot.php" Leads To New Password Being Sent

Million Dollar Script Forums Bug Reports Refreshing "forgot.php" Leads To New Password Being Sent

This topic contains 0 replies, has 1 voice, and was last updated by  GoBot 2 years, 3 months ago.

Viewing 1 post (of 1 total)
  • Author
    Posts
  • #2345

    GoBot
    Participant

    Hey,

    I don’t know if this is a bug, but it’s something I noticed and thought I’d report on it.

    When you go to the “Forgot Password” page (forgot.php), after you submit your email address, if you refresh the page, the site will send you another password. I refreshed a few times and received a new email with a new password each time I did it.

    It’s not a huge issue, but like I said, just thought I’d report what I found.

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.